Skip to main content
New announcements and recruitment drives Find out about the Foundation’s current projects Join us as a partner or volunteer Support our work New announcements and recruitment drives Find out about the Foundation’s current projects Join us as a partner or volunteer Support our work

Privacy Policy

1. General information

  1. This policy applies to the website operating at the following URL: https://impuls-spoleczny.pl/
  2. The website operator and the controller of personal data is: the Social Impulse Foundation, with its registered office in Rzeszów (Fryderyka Szopena 35C / W164, 35-055 Rzeszów), entered in the National Court Register in the register of associations, other social and professional organisations, foundations and independent public healthcare institutions, maintained by the District Court in Rzeszów, 12th Commercial Division of the National Court Register under KRS number 0001236396, with Tax Identification Number (NIP): 8133951201 and Statistical Identification Number (REGON): 544560462.
  3. The operator’s email address: kontakt@impuls-spoleczeny.pl.
  4. The Operator is the Data Controller of your personal data in respect of the data you have provided voluntarily on the Website.
  5. The website uses personal data for the following purposes:
    • Handling enquiries via a form
    • Presentation of an offer or information
  6. The website collects information about users and their behaviour in the following ways:
    1. Through data voluntarily entered into forms, which is then fed into the Operator’s systems.
    2. By storing cookies on end-user devices.

2. Selected data protection methods used by the Controller

  1. The login pages and those where personal data is entered are protected at the transmission layer (SSL certificate). This ensures that personal data and login details entered on the website are encrypted on the user’s computer and can only be read on the destination server.
  2. Personal data stored in the database is encrypted in such a way that only the Operator, who holds the key, can read it. This ensures that the data is protected in the event that the database is stolen from the server.
  3. User passwords are stored in hashed form. The hashing function is one-way – it cannot be reversed – which is now the modern standard for storing user passwords.
  4. The operator changes their administrative passwords from time to time.
  5. In order to protect data, the Operator regularly makes backup copies.
  6. An important aspect of data protection is the regular updating of all software used by the Controller to process personal data, which specifically involves regular updates to software components.

3. Web hosting

  1. The website is hosted (and technically maintained) on the operator’s server: hekko.pl
  2. Registration details of the hosting company: H88 S.A., with its registered office in Poznań, at 22 Franklina Roosevelta, 60-829 Poznań, entered in the National Court Register by the Poznań District Court – Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register under KRS number 0000612359, REGON 364261632, NIP 7822622168, share capital PLN 210,000.00, fully paid up.
  3. At the following address https://hekko.pl You can find out more about web hosting and check the hosting company’s privacy policy.
  4. Web hosting company:
    • implements measures to protect against data loss (e.g. disk arrays, regular backups),
    • implements appropriate fire safety measures at processing sites (e.g. specialised fire-extinguishing systems),
    • implements appropriate measures to protect processing systems in the event of a sudden power failure (e.g. dual power supply circuits, generators, UPS systems),
    • implements physical security measures to control access to data processing sites (e.g. access control, surveillance),
    • implements measures to ensure suitable environmental conditions for servers as components of the data processing system (e.g. monitoring of environmental conditions, specialised air-conditioning systems),
    • implements organisational measures to ensure the highest possible level of security and confidentiality (training, internal regulations, password policies, etc.),
    • appointed a Data Protection Officer.
  5. In order to ensure technical reliability, the hosting company maintains server-level logs. The following may be logged:
    • resources identified by a URL (addresses of the requested resources – web pages, files),
    • the time the query was received,
    • time of reply,
    • client station name – identification carried out via the HTTP protocol,
    • information about errors that occurred during the execution of HTTP transactions,
    • the URL of the page previously visited by the user (referrer link) – where the user accessed the Website via a link,
    • information about the user’s browser,
    • information about the IP address,
    • diagnostic information relating to the process of self-ordering services via the order forms on the website,
    • information relating to the handling of emails sent to the Operator and sent by the Operator.

4. Your rights and further information on how your data is used

  1. In certain situations, the Controller is entitled to disclose your personal data to other recipients where this is necessary for the performance of a contract concluded with you or to fulfil the Controller’s legal obligations. This applies to the following categories of recipients:
    • a hosting company operating on a trust basis
  2. Your personal data will be processed by the Controller for no longer than is necessary to carry out the related activities specified in separate regulations (e.g. regarding the keeping of accounts). With regard to marketing data, the data will not be processed for longer than 3 years.
  3. You have the right to request the following from the Controller:
    • access to your personal data,
    • their corrections,
    • deletion,
    • restrictions on processing,
    • and data transfer.
  4. You have the right to object to the processing referred to in point 3.3(c) to the processing of personal data for the purposes of the Controller’s legitimate interests, including profiling; however, the right to object may not be exercised where there are valid and legitimate grounds for processing, which override your interests, rights and freedoms, in particular the establishment, exercise or defence of legal claims.
  5. A complaint may be lodged with the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw, regarding the Controller’s actions.
  6. The provision of personal data is voluntary, but necessary for the operation of the Website.
  7. Automated decision-making, including profiling, may be carried out in relation to you for the purpose of providing services under the contract and for the purpose of direct marketing by the Controller.
  8. Personal data is not transferred from third countries within the meaning of data protection legislation. This means that we do not transfer it outside the European Union.

5. Information on the forms

  1. The website collects information provided voluntarily by the user, including personal data, where such data is provided.
  2. The website may store information about connection details (timestamps, IP address).
  3. In some cases, the website may store information that makes it easier to link the data in the form to the email address of the user filling in the form. In such cases, the user’s email address appears within the URL of the page containing the form.
  4. The data provided in the form is processed for the purpose specified by the function of that particular form, e.g. to process a service request or a sales enquiry, to register for services, etc. In each case, the context and description of the form clearly state its purpose.

6. Administrator logs

  1. Information regarding users’ behaviour on the website may be logged. This data is used for the purpose of administering the website.

7. Key marketing techniques

  1. The operator uses Google Analytics (Google Inc., based in the USA) to carry out statistical analysis of website traffic. The operator does not transfer any personal data to the provider of this service, only anonymised information. The service relies on the use of cookies on the user’s device. With regard to information about the user’s preferences collected by the Google advertising network, the user may view and edit the information contained in cookies using the following tool: https://www.google.com/ads/preferences/
  2. The Operator uses the Facebook pixel. This technology enables Facebook (Facebook Inc., based in the USA) to recognise that a person registered with it is using the Website. In this case, the Operator relies on data for which it is the controller; the Operator does not itself transfer any additional personal data to Facebook. The service relies on the use of cookies on the user’s device.
  3. The Operator uses a solution that automates the Website’s operations in relation to users; for example, it may send an email to a user after they have visited a specific subpage, provided that they have consented to receiving marketing communications from the Operator.

8. Information about cookies

  1. This website uses cookies.
  2. Cookies are IT data, specifically text files, which are stored on the Website User’s device and are intended to facilitate the use of the Website’s web pages. Cookies usually contain the name of the website from which they originate, the duration for which they are stored on the end device, and a unique number.
  3. The entity that places cookies on a Website User’s end device and accesses them is the Website operator.
  4. Cookies are used for the following purposes:
    1. to maintain the user’s session on the Website (after logging in), so that the user does not have to re-enter their username and password on every subpage of the Website;
    2. to achieve the objectives set out above in the section ‘Key marketing techniques’;
  5. The Website uses two main types of cookies: ‘session’ cookies and ‘persistent’ cookies. ‘Session’ cookies are temporary files which are stored on the User’s device until they log out, leave the website or close the software (web browser). ‘Persistent’ cookies are stored on the User’s device for the period specified in the cookie settings or until the User deletes them.
  6. Web browsing software (a web browser) usually allows cookies to be stored on the User’s device by default. Users of the Website may change their settings in this regard. Your web browser allows you to delete cookies. It is also possible to block cookies automatically. Detailed information on this subject can be found in your web browser’s help section or documentation.
  7. Restrictions on the use of cookies may affect certain features available on the Website’s web pages.
  8. Cookies stored on a Website User’s device may also be used by entities cooperating with the Website operator; this applies in particular to the following companies: Google (Google Inc., based in the USA), Facebook (Facebook Inc., based in the USA), Twitter (Twitter Inc., based in the USA).

9. Managing cookies – how do you give and withdraw consent in practice?

  1. If you do not wish to receive cookies, you can change your browser settings. Please note that disabling cookies that are essential for authentication, security and the retention of your preferences may hinder, and in extreme cases prevent, your use of the website.
  2. To manage your cookie settings, select the web browser you use from the list below and follow the instructions:

Other forms of support